← All advisories

Medium severity5.3NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-17373

CVE-2020-17373

Description

SugarCRM before 10.1.0 (Q3 2020) allows SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sugarcrm/Sugarcrm2 versions
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*range: <10.1.0
- (no CPE)range: <10.1.0
SugarCRM/SugarCRMdescription

Patches

Vulnerability mechanics

References

3

packetstormsecurity.com/files/158848/SugarCRM-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2020/Aug/9nvdExploitMailing ListThird Party Advisory
support.sugarcrm.com/Resources/Security/sugarcrm-sa-2020-051/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.